qa-automation-specialist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow uses Playwright to page.goto(BASE_URL) and then reads page content (e.g., page.title(), getAttribute(...), allTextContents() for JSON-LD, and screenshot capture) from the live production site, which is outsider-authored web content not authored by the operating user.